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DETAILED ACTION 

1. This action is responsive to communication: amendment filed on 23 April 2007, with 
acknowledgement of an original application filed on 21 July 2000. 

2. Claims 1, 2, 4-29, and 31-51, are pending; claims 1,17, and 28 are independent claims. 
Claim 5 1 is new, amendment to the claims is accepted. 

3. The IDS submitted 7 March 2007, 16 March 2007, 18 June 2007, and 10 July 2007 has 
been considered. 

Response to Arguments 

4. Applicant's arguments with respect to 1 , 2, 4-29, and 31-50 have been considered but 
they are moot due to new grounds of rejection. 

Note the Allowable Subject Matter in the last rejection has been withdrawn due to the 
new grounds of rejection. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or 
described as set forth in section 102 of this title, if the differences between the subject matter 
sought to be patented and the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having ordinary skill in the art to 
which said subject matter pertains. Patentability shall not be negatived by the manner in which 
the invention was made. 
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6. Claims 1, 5, 14-18, 20, 25-28, 32, 34, 36, 40-43, and 51, are rejected under 35 
U.S.C 103(a) as being unpatentable over Okabe et ah US Patent No. 6,889,208 (hereinafter 
'208) in view of Downs et al US Patent No. 6,574,609 (hereinafter '609). 

As to independent claim 1, "A method of storing program material in a media 
storage device communicatively coupled to a receiver for subsequent replay, comprising 
the steps of:" is taught in '208 col. 7, lines 13-25; 

"(b) decrypting the received access control information in a conditional access 
module releasably coupleable with the receive to produce the first encryption key" is shown 
in '208 col. 7, lines 34-48; 
the following is not explicitly taught in '208: 

"(a) accepting encrypted access control information and the program material 
encrypted according to a first encryption key in the receiver, the access control information 
including a first encryption key and control data" however '609 teaches that program 
material is encrypted in a Secure Container that includes encrypted program material as well as 
access control information, i.e. usage conditions that is encrypted according to a first encryption 
key in col. 10, lines 5-17; 

"(c) decrypting the program material using the first encryption key" however '609 
teaches that program material can be decrypted in user devices in col. 1 1, line 64 through col. 12, 
line 11; 

"(d) re-encrypting the program material according to a second encryption key; 
and" however '609 teaches that the End-User devices enforce usage conditions before copying 
to an external device in col. 20, lines 10-29; 
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"(e) encrypting the second encrypfion key according to a third encryption key to 
produce a fourth encryption key; (f) providing the re-encrypted program material and the 
fourth encryption key for storage" however '609 teaches that when a copy is generated a new 
encryption key is made in col. 20, lines 30-50. 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the method of protecting digital content used in distribution taught in '208 to include a 
controlling the number of copies generated. One of ordinary skill in the art would have been 
motivated to perform such a modification because content distributors have been slow to 
embrace digital content distributions systems because of the lack of security for digital content 
see '609 (col. 2, lines 2-44) "The use of global distribution systems such as the Internet for 
distribution of digital assets such as music, film, computer programs, pictures, games and other 
content continues to grow. At the same time owners and publishers of valuable digital content 
have been slow to embrace the use of the Internet for distribution of digital assets for several 
reasons. One reason is that owners are afraid of unauthorized copying or pirating of digital 
content. The electronic delivery of digital content removes several barriers to pirating . . . This 
degradation in quality is not present when a picture is stored digitally. Each copy, and every 
generation of copies can be as clear and crisp as the original. The aggregate effect of perfect 
digital copies combined with the very low cost to distribute content electronically and to 
distribute content widely over the Internet makes it relatively easy pirate and distribute 
unauthorized copies. With a couple of keystrokes, a pirate can send hundred or even of 
thousands of perfect copies of digital content over the Internet. Therefore a need exists to ensure 
the protection and security of digital assets distributed electronically. Providers of digital content 
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desire to establish a secure, global distribution system for digital content that protects the rights 
of content owners. The problems with establishing a digital content distribution system includes 
developing systems for digital content electronic distribution, rights management, and asset 
protection". 

As to dependent claim 5, "wherein the access control information further comprises 
metadata describing at least one right for the program material 1 ' however 6 609 teaches the 
Secure Container incorporates various usage conditions in col. 9, lines 45-60, note 'a usage 
condition' is interpreted to be equivalent to 'at least one right for the program material'. The 
motivation to combine 4 609 and '208 is the same as stated above in claim 1. 

As to dependent claim 14, "wherein the re-encrypted program material and the 
fourth encryption key are stored on a media storage device" however '609 teaches that when 
a copy is generated a new encryption key is made in col. 20, lines 30-50. The motivation to 
combine '609 and '208 is the same as stated above in claim 1. 

As to dependent claim 15, "wherein the control data is temporally-variant" however 
'609 teaches that the usage conditions can have a time period associated with validity in col. 10, 
lines 39-43. The motivation to combine '609 and '208 is the same as stated above in claim 1. 

As to dependent claim 16, "wherein the temporally-variant control data associates 
an expiration time with the program material" however '609 teaches that the usage 
conditions can have a time period associated with validity in col. 10, lines 39-43. The 
motivation to combine '609 and '208 is the same as stated above in claim 1. 

As to independent claim 17, this claim is directed to the apparatus executing the method 
of claim 1 and 15; therefore it is rejected along similar rationale 
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As to dependent claim 18, further comprising: a tuner, communicatively coupleable 
to the conditional access module for receiving the encrypted access control information and 
the program material encrypted according to a first encryption key" is shown in '208 col. 6, 
lines 34-48 (Note tuner is considered equivalent to a communication device that communicates 
with a satellite); 

"a third decryption module, for decrypting the program material using the first 
encryption key produced by the conditional access module; a second encryption module, 
for re-encrypting the decrypted program material according to the second encryption key; 
and a fourth decryption module, for decrypting the re-encrypted program material 
according to the second encryption key" however '609 teaches that when a copy is generated a 
new encryption key is made in col 20, lines 30-50. 

As to dependent claim 20, this claim contains substantially similar subject matter as 
claim 5; therefore it is rejected along similar rationale. 

As to dependent claim 25, "wherein the second encryption key is stored in the 
conditional access module" is taught in '208 col. 7, lines 13-38. 

As to dependent claim 26, "wherein the third encryption key is stored in the 
conditional access module" is shown in '208 col. 7, lines 13-38. 

As to dependent claim 27, "wherein the conditional access module is releaseably 
communicative coupleable to: a tuner for receiving the encrypted access control 
information and the program material encrypted according to a first encryption key" is 
taught in '208 col. 6, lines 33-48; 
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"a third decryption module, for decrypting the program material using the first 
encryption key from the conditional access module a second encryption module, for re- 
encrypting the decrypted program material according to the key and a media storage 
device" however '609 teaches that when a copy is generated a new encryption key is made, in 
addition '609 teaches if allowed the copy can be to a media storage device in col. 20, lines 30- 
50. 

As to independent claim 28, this claim is directed to the apparatus implementing the 
method of claim 1; therefore it is rejected along similar rationale. 

As to dependent claims 32, this claim contains substantially similar subject matter as 
claim 5; therefore it is rejected along similar rationale. 

As to dependent claim 34, "further comprising: means for generating replay right 
data from the metadata" however '609 teaches that the metadata contains in it the usage 
conditions in col. 10, lines 5-17, note these usage condition are equivalent to the 'replay right 
data' the means for generating is by using the Secure Container technology taught in '609. 

As to dependent claim 36, "further comprising: means for retrieving the stored re- 
encrypted program material and the fourth encryption key; means for decrypting the 
fourth encryption key using the third encryption key to produce the second encryption key, 
and means for decrypting the re-encrypted material using the second encryption key" 
however '609 teaches that when a copy is generated a new encryption key is made in col. 20, 
lines 30-50. 

As to dependent claim 40-43, these claim contain substantially similar subject matter as 
claims 14-16; therefore they are rejected along similar rationale. 



Application/Control Number: 09/620,772 Page 8 

Art Unit: 2134 

As to dependent claim 51, "wherein the re-encrypted program material and the 
fourth encryption key are provided for storage external to the conditional access module 1 ' 

however '609 teaches that the program material can be copied to external storage in col. 20, 
lines 10-29. The motivation to combine '208 and '609 is the same as stated above in claim 1. 
7. Claims 2, 4, 29, and 31, are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Okabe et al. US Patent No. 6,889,208 (hereinafter '208) in view of Downs et al US Patent No. 
6,574,609 (hereinafter '609) in further view of Dolphin US Patent No. 5,677,953 
(hereinafter '953). 

As to dependent claim 2, the following is not taught in the combination of teachings of 
'609 and '208: "wherein the encrypted access control information further comprises 
temporally-variant control data, and the method further comprises the steps of: decrypting 
the received access control information to produce the temporally variant control data; and 
modifying the temporally variant control data to generate temporally-invariant control 
data" however '953 teaches that an attribute can be assigned to a decrypted content such as the 
time period the decryption key is valid for in col. 7, lines 7-1 1, in addition the usage conditions 
can be modified in col. 7, line 36 through col. 8, line 26. 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the method of protecting digital content used in distribution taught in '208 and '609 to 
include a means to update the time variant control data. One of ordinary skill in the art would 
have been motivated to perform such a modification because a need exists for subscribers to 
update their subscription services when the service is terminated due to time limit see '953 
(col. 2, lines 22 et seq.) "The need for protection of information stored on, for example, CD- 
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ROMs, or one a local or remote server from unauthorized access needs to be satisfied before 
such a publication distribution system is acceptable to publishers. Security provided at both the 
publisher's site and subscriber's site is needed to prevent the unauthorized access to data 
contained on the media. Moreover, valid subscribers need to be protected when their subscription 
service is terminated". 

As to dependent claim 4, "wherein the conditional access module on a smartcard" 
however '953 teaches the invention includes utilization of an encryption tool such as a smartcard 
in col. 2, lines 59-67. The motivation to combine '208, '609, and '953 is the same as stated 
above in claim 2. 

As to dependent claims 29 and 31, these claims contain substantially similar subject 
matter as claims 2 and 4; therefore they are rejected along similar rationale. 
8. Claims 6-13, 19, 21-24, 33, 35, 37-39, and 44-50 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Okabe et al. US Patent No. 6,889,208 (hereinafter '208) in view of 
Downs et al US Patent No. 6,574,609 (hereinafter '609) in further view of Akins, III et al. U.S. 
Patent No. 6,560,340 (hereinafter '340). 

As to dependent claim 6, the following is not explicitly taught in the combination of 
'208 and '609: "further comprising the step of generating the second encryption key at 
least in part from the metadata" however '340 teaches that data distributed with the content 
such as a 'entitlement control messages' may include a key or control word for what programs 
the subscriber is allowed to view in col. 4, lines 50-61. 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify the method of protecting digital content used in distribution taught in '208 and '609 to 
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include an improved means of distributing content data. One of ordinary skill in the art would 
have been motivated to perform such a modification because more flexible means are needed to 
distribute data see '340 (col. 2, lines 60 et seq.) "Thus, the service distribution organizations 
require access restrictions which are both more secure and more flexible than those in 
conventional systems. 

As to dependent claim 7, "wherein steps (b)-(f) are performed in response to a pre- 
buy Message" however '340 teaches in col. 12, lines 39-67. The motivation to combine '340, 
'609 and '208 is the same as stated above in claim 6. 

As to dependent claim 8, "wherein the access control information further comprises 
metadata describing at least one right for the program material and the method further 
comprises the step of: generating replay right data from the metadata" however '340 
teaches in col. 31, lines 7-24. The motivation to combine '340, '609 and '208 is the same as 
stated above in claim 6. 

As to dependent claim 9, "wherein the replay right dam is further generated from 
pre-buy data" however 5 340 teaches in col. 31, lines 7-24. The motivation to combine '340, 
'609 and '208 is the same as stated above in claim 6. 

As to dependent claim 10, "further comprising the steps of retrieving the stored re- 
encrypted program material and the fourth encryption key; decrypting the fourth 
encryption key using the third encryption key to produce the second encryption key; and 
decrypting the re-encrypted material using the second encryption key" however '340 
teaches in col. 6, lines 24-53. The motivation to combine '340, '609 and '208 is the same as 
stated above in claim 6. 
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As to dependent claim 11, "wherein the step of decrypting the fourth encryption key 
using the third encryption key to produce the second encryption key is performed in 
response to a subscriber request to access the program material" however '340 teaches in 
col. 30, lines 38-67. The motivation to combine '340, '609 and '208 is the same as stated above 
in claim 6. 

As to dependent claim 12, "wherein the access control information further 
comprises metadata describing at least one right for the program material, the subscriber 
request to access the program material comprises buy data, and the method further 
comprises the steps of; generating replay right data from the metadata; accepting the buy 
data; comparing the buy data with the replay right data; and decrypting the fourth 
encryption key using the third encryption key to produce the second encryption key 
according to the comparison between the buy data and the replay right data" however '340 
col. 12, line 56 through col. 13, line 39. The motivation to combine '340, '609 and '208 is the 
same as stated above in claim 6. 

As to dependent claim 13, "wherein steps (b)-(f) are performed in response to a pre- 
buy message, and wherein: the second encryption key and the third encryption key are 
stored in a smartcard, and the replay right data is generated from the metadata sued the 
pie-buy message in the smartcard; and the steps of accepting the buy data, comparing the 
buy data with the replay right data, and decrypting the fourth encryption key using the 
third encryption key to produce the second encryption key according to the comparison 
between the buy data arid the replay right data tire performed in the smartcard" however 
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'340 teaches in col. 21, lines 1-40. The motivation to combine '340, '609, and 208 is the same as 
stated above in claim 6. 

As to dependent claim 19, "wherein the conditional access module further 
comprises: a pre-buy module, for controlling the first decryption module" however '340 
teaches in col. 12, line 56 through col. 13, line 14. The motivation to combine '340, '609 and 
'208 is the same as stated above in claim 6. 

As to dependent claim 21, "wherein pre-buy module generates replay right data 
from the metadata" however '340 teaches the use of impulse pay per view message, the pay per 
view messages are received by the set top box, which obviously is the 'pre-buy module' in col. 
12, lines 39-67. The motivation to combine '340, '609 and '208 is the same as stated above in 
claim 6. 

As to dependent claim 22, "further comprising a buy module, communicatively 
coupled to the pre-buy module" however '340 teaches the use of impulse pay per view 
message, the pay per view messages are received by the set top box, which obviously is the 'pre- 
buy module' in col. 12, lines 39-67. The motivation to combine '340, '609 and '208 is the same 
as stated above in claim 6. 

As to dependent claim 23, "wherein the buy module comprises: a purchase module; 
for accepting buy data, and comparing the buy data and the replay right data from the 
pre-buy module; and a control module for controlling the second decryption module based 
on the comparison between the buy data and the replay right data" however '340 teaches 
that the messages receive works with the delivery system and entitlement agents in col. 13, 
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lines 14-54. The motivation to combine '340, '609 and '208 is the same as stated above in 
claim 6. 

As to dependent claim 24, "further comprising a billing module, for recording the 
buy data" however '340 teaches the entitlement agent responds to the FPM by adjusting its 
billing as required in col. 40, lines 2-5. The motivation to combine '340, '609 and '208 is the 
same as stated above in claim 6. 

As to dependent claim 44, "wherein the access control information further comprise 
metadata and the method further comprises the step of generating the second encryption 
key at least in part from metadata" however '340 teaches generating keys from the metadata 
received in col. 4, lines 50-61. 

As to dependent claim 45, "further comprising the step of: augmenting the second 
encryption key with at least a portion of the metadata before encrypting the second 
encryption key in the conditional access module" however '340 teaches using the metadata 
received to update the control information in col. 4, lines 50-61. 

As to dependent claim 46, "wherein the access control information further 
comprises metadata describing at least one right for the program material and the method 
further comprises the step of : augmenting the second encryption key with at least a 
portion of the metadata before encrypting the second encryption key in the conditional 
access module" however '340 teaches the metadata consist of program access rights and that 
these access rights can be used before encryption in col. 4, lines 50-61 . 

As to dependent claims 31-42, these claims contain substantially similar subject matter 
as claims 4-16, and 44-46; therefore they are rejected along similar rationale. 
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As to dependent claim 47, "wherein the conditional access module generates the 
second encryption key at least in part from the metadata" however '340 teaches in col. 4, 
lines 50-61. The motivation to combine '208 and '340 is the same as stated above in claim 17. 

As to dependent claim 48, "wherein the access control information further 
comprises a metadata and the conditional access module generated the second encryption 
key at least in part from the metadata" however '340 teaches in col. 4, lines 50-61. 

As to dependent claim 49, "wherein the conditional access module augments the 
second encryption key with at least a portion of the metadata before encrypting the second 
encryption key in the conditional access module" is taught in '208 col. 7, lines 13-25. 

As to dependent claim 50, "wherein the access control information further 
comprises metadata, and wherein the conditional access module augments the second 
encryption key with at least a portion of the metadata before encrypting the second 
encryption key in the conditional access module" however '340 teaches in col. 4, lines 50-61. 
The motivation to combine '208 and '340 is the same as stated above in claim 17. 

Conclusion 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Ellen C Tran whose telephone number is 
(571) 272-3842. The examiner can normally be reached from 6:00 am to 4:00 pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on (571) 272-381 1. The fax phone number for the 
organization where this application or proceeding is assigned is (571) 273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 



Ellen Tran 
Patent Examiner 
Technology Center 2134 
20 July 2007 



